CVE-2020-2687: Medium severity Oracle PeopleSoft Enterprise PeopleTools vulnerability
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-2687?
CVE-2020-2687 is considered a critical vulnerability due to its ease of exploitation and potential impact on unauthorized access.
How do I fix CVE-2020-2687?
To fix CVE-2020-2687, upgrade your Oracle PeopleSoft Enterprise PeopleTools to version 8.58 or later.
Who is affected by CVE-2020-2687?
CVE-2020-2687 affects users of Oracle PeopleSoft Enterprise PeopleTools versions 8.56 and 8.57.
What kind of access is required to exploit CVE-2020-2687?
CVE-2020-2687 can be exploited by an unauthenticated attacker with network access via HTTP.
What component of PeopleSoft is involved in CVE-2020-2687?
CVE-2020-2687 involves a vulnerability in the Elastic Search component of the PeopleSoft Enterprise PeopleTools.